e69d94c546
Small update made to capture
...
paths with spaces, which include
quotation marks around the whole
path of the execuate, and
to executables which may include
command line arguments and not
just the name of the executable in
the "Service_File_Name" field.
The naming of that field in the original
log message is a bit misleading.
2022-11-03 15:46:00 -07:00
488f89381b
Merge pull request #2438 from splunk/dependabot/pip/jsonschema-4.17.0
2022-11-02 18:40:27 +00:00
a5f78d4df6
Merge pull request #2437 from splunk/dependabot/pip/gitpython-3.1.29
2022-11-02 18:39:54 +00:00
0351dccb75
Merge pull request #2434 from splunk/dependabot/pip/psutil-5.9.3
2022-11-02 18:39:03 +00:00
9758058b5b
Merge pull request #2435 from splunk/dependabot/pip/pytest-7.2.0
2022-11-02 18:38:48 +00:00
737b57d7d8
Branch was auto-updated.
2022-11-02 11:11:02 -07:00
a72e19e4af
Branch was auto-updated.
2022-11-02 11:11:01 -07:00
18b2ded2f3
Branch was auto-updated.
2022-11-02 11:11:00 -07:00
10115d8310
Branch was auto-updated.
2022-11-02 11:10:58 -07:00
db270f4119
Update dist/escu, dist/ssa, and dist/api folders with the latest content associated with this tag
2022-11-02 18:10:38 +00:00
670a3ee2db
Branch was auto-updated.
2022-11-02 10:43:23 -07:00
9d9db7f065
Branch was auto-updated.
2022-11-02 10:43:22 -07:00
763edfa717
Branch was auto-updated.
2022-11-02 10:43:21 -07:00
49ac682068
Branch was auto-updated.
2022-11-02 10:43:21 -07:00
73e927e051
Merge pull request #2440 from splunk/appinpect_azure
...
formatting error
2022-11-02 10:43:00 -07:00
dba61a49cf
references
2022-11-02 10:40:40 -07:00
33f5c207d9
formatting
2022-11-02 10:39:05 -07:00
9b4a67c35b
Branch was auto-updated.
2022-11-02 10:18:24 -07:00
68fe7f50f6
Branch was auto-updated.
2022-11-02 10:18:23 -07:00
ede8ab54a5
Branch was auto-updated.
2022-11-02 10:18:22 -07:00
039d15aaad
Branch was auto-updated.
2022-11-02 10:18:22 -07:00
d8f8c21296
Merge pull request #2439 from splunk/security_updates
...
Security updates
2022-11-02 10:18:07 -07:00
834adb334c
Create splunk_code_injection_via_custom_dashboard_leading_to_rce.yml
2022-11-02 10:17:07 -07:00
c2279092c3
Delete splunk_code_injection_via_custom_dashboard_leading_to_rce.txt
2022-11-02 10:12:08 -07:00
dba5af84c9
removed file that should not have been added
2022-11-02 10:09:55 -07:00
5e911193bd
Merge branch 'security_updates' of https://github.com/splunk/security_content into security_updates
2022-11-02 10:05:40 -07:00
247d825791
updated description
2022-11-02 10:05:12 -07:00
4351d385d0
Moved detection and test files from production to experimental
2022-11-02 10:02:17 -07:00
c76f6c1ce0
Update splunk_xss_in_save_table_dialog_header_in_search_page.yml
2022-11-02 09:14:58 -07:00
f5eaa40534
Changed media.githubusercontent
...
to raw.githubusercontent links
2022-11-02 09:02:30 -07:00
79e8b40a67
Update splunk_xss_in_save_table_dialog_header_in_search_page.yml
2022-11-02 08:40:23 -07:00
ca49cb93ac
Merge pull request #2436 from splunk/dependabot/pip/splunk-appinspect-2.28.0
2022-11-01 23:25:15 +00:00
b0ad14b44a
Bump jsonschema from 4.16.0 to 4.17.0
...
Bumps [jsonschema](https://github.com/python-jsonschema/jsonschema ) from 4.16.0 to 4.17.0.
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases )
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/python-jsonschema/jsonschema/compare/v4.16.0...v4.17.0 )
---
updated-dependencies:
- dependency-name: jsonschema
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-11-01 23:01:28 +00:00
05cbbbcf72
Bump gitpython from 3.1.27 to 3.1.29
...
Bumps [gitpython](https://github.com/gitpython-developers/GitPython ) from 3.1.27 to 3.1.29.
- [Release notes](https://github.com/gitpython-developers/GitPython/releases )
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES )
- [Commits](https://github.com/gitpython-developers/GitPython/compare/3.1.27...3.1.29 )
---
updated-dependencies:
- dependency-name: gitpython
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-11-01 23:01:26 +00:00
9602da1fa2
Bump splunk-appinspect from 2.26.0 to 2.28.0
...
Bumps [splunk-appinspect](https://splunk.com ) from 2.26.0 to 2.28.0.
---
updated-dependencies:
- dependency-name: splunk-appinspect
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-11-01 23:01:23 +00:00
d14c840ada
Bump pytest from 7.1.3 to 7.2.0
...
Bumps [pytest](https://github.com/pytest-dev/pytest ) from 7.1.3 to 7.2.0.
- [Release notes](https://github.com/pytest-dev/pytest/releases )
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pytest-dev/pytest/compare/7.1.3...7.2.0 )
---
updated-dependencies:
- dependency-name: pytest
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-11-01 23:01:20 +00:00
d0ac441626
Bump psutil from 5.9.2 to 5.9.3
...
Bumps [psutil](https://github.com/giampaolo/psutil ) from 5.9.2 to 5.9.3.
- [Release notes](https://github.com/giampaolo/psutil/releases )
- [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst )
- [Commits](https://github.com/giampaolo/psutil/compare/release-5.9.2...release-5.9.3 )
---
updated-dependencies:
- dependency-name: psutil
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-11-01 23:01:16 +00:00
aa27dd3b02
Merge pull request #2419 from splunk/qakbot_2
...
qakbot_2
2022-11-01 10:00:09 -07:00
d2da2024d1
Merge pull request #2426 from splunk/issue_templates
...
I've got a lot of issues with you people
2022-11-01 09:31:06 -07:00
b73c09d47d
Branch was auto-updated.
2022-11-01 09:26:25 -07:00
47ff80b515
Merge pull request #2421 from splunk/ba_lolbas_remove_duplicate_exe
...
cleaning up BA lolbas detection to remove duplicate exe
2022-11-01 09:26:00 -07:00
844df50ee5
Fixed format of CVE tag
2022-11-01 08:41:14 -07:00
a80f89e32c
Replaced index= and sourcetype= with appropriate macro. Added that macro as well.
2022-11-01 08:38:04 -07:00
d156f9d9e3
Branch was auto-updated.
2022-11-01 08:36:07 -07:00
cb8dd448a4
Branch was auto-updated.
2022-11-01 08:36:06 -07:00
8e1cf21e83
Merge pull request #2433 from splunk/minor_req_fields
...
updated req fields
2022-11-01 08:35:49 -07:00
689277d6ee
Added a number of macros, tests, and detections in support of release of Splunk vulnerabilities and patches.
2022-11-01 08:12:14 -07:00
81c4cb154d
updated req fields
2022-11-01 07:46:19 -07:00
4427728ed3
Branch was auto-updated.
2022-11-01 07:20:45 -07:00
9042adf61c
Branch was auto-updated.
2022-11-01 07:20:45 -07:00
pyth0n1c